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Research  on  protocols  in  ad  hoc  networks,  secret  sharing  to  support  distributed  computation,  and  mechanisms  to  enhance  data 
encapsulation  for  mobile  computations  has  continued  since  our  Interim  Progress  Report.  Several  papers  were  published  or  submitted 
for  publication  relating  to  the  research  conducted  in  relation  to  this  project.  An  important  discovery  relating  to  the  family  of  algorithms 
that  can  guarantee  node  and  link  disjoint  paths  in  ad  hoc  networks  of  reasonable  size  and  density.  A  message  delivery  mechanism  that 
resists  broadcast  storm  while  retaining  the  positive  reliability  properties  of  flooding  was  also  developed. 

Work  in  progress 

Willard  Thompson  has  devised  a  framework  and  corresponding  mechanism  for  protecting  privacy  of  computations  by  mobile 
agents  called  "Semantic  Encryption  Transformation  Scheme". 

Additional  work  by  non-ARO  funded  students 

Todd  MacDonald,  a  self-funded  Ph.D.  student  of  PI  Yasinsac  is  also  working  in  this  area  and  has  amassed  a  large  volume  of 
work  in  homomorphic  encryption  and  protocol  verification  for  mobile  agent  schemes. 

Khandy  Polite  is  a  DoD  IASP  student  that  conducted  research  in  an  area  closely  related  to  mobile  agent  security.  Her  thesis  is 
entitled: "  Privacy  Preserving  Data  Aggregation  in  Wireless  Sensor  Networks"  was  completed  in  April  2004. 

Another  DoD  IASP  student,  Anna  Suen,  completed  a  Mobile  Agent  security  related  thesis  entitled:  ".Mobile  Agent  Protection  with 
Data  Encapsulation  and  Execution  Tracing"  in  April  2003. 
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3 .  Report  of  Inventions  NA 

4.  Statement  of  the  problem  studied 

The  investigators  have  studied  problems  of  mobile  tactical  communications  with  the  goal  of  supporting 
battlefield  comm.  Much  of  the  work  over  this  reporting  period  has  involved  research  of  fundamental 
theories  that  support  protecting  the  logical  computing  infrastructure  and  techniques  for  protecting 
communication  applications  among  mobile  nodes.  Secure  routing,  mitigating  broadcast  storms,  intrusion 
detection  in  encrypted  environments,  secure  data  aggregation,  and  enabling  key  distribution  in  low 
power,  low  bandwidth  environments  are  the  areas  most  considered. 

5.  Summary  of  the  most  important  results 

5.1.  The  investigators  discovered  a  family  of  algorithms  that  can  guarantee  node  and  link  disjoint  paths 
in  ad  hoc  networks  of  reasonable  size  and  density.  Properties  of  these  algorithms  make  them  excellent 
candidates  for  implementation  in  low  power  environments. 

5.2.  A  second  important  result  involves  a  message  delivery  mechanism  that  resists  broadcast  storm  while 
retaining  the  positive  reliability  properties  of  flooding.  This  mechanism  involves  establishing  hexagonal 
tiles  allowing  node-oriented  flooding  to  be  reduced  to  tile-flooding.  This  system  reflects  the  strongest 
Byzantine  security  properties  where  if  there  is  at  least  one  honest  member  in  each  tile,  broadcast 
messages  are  guaranteed  to  reach  every  member  in  the  target  group. 

5.3.  A  classic  problem  in  distributed  computing  is  mobile  code  protection.  One  approach  to  solving  that 
problem  is  through  program  obfuscation/encryption.  The  investigators  have  discovered  architecture  for 
systematically  confusing  code  to  prevent  predictable -result  malicious  activity.  The  architecture  also 
establishes  a  forum  and  mechanisms  for  verifying  and  measuring  the  level  of  confusion  in  the  mobile 
modules. 


5.4  The  investigators  defined  an  approach  to  mobile  agent  systems  security  using  a  multi-agent 
approach.  My  partitioning  the  security  task  into  sub-components,  redundant,  collaborative  processes  can 
be  applied  to  ensure  and  verify  results  of  distributed  data  collection  and  computation 


